Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b301b075-7382-36d3-9f52-a600b0abaeb7.roa
File:                     b301b075-7382-36d3-9f52-a600b0abaeb7.roa (raw, json)
Hash identifier:          TqkFedLBw5Vw3oH8DQaI6j/ffpY2JRxqk0M2LFkH6sw=
Subject key identifier:   1E:A5:B2:8A:D6:7C:09:E6:D4:6F:4F:BA:B6:C3:04:2E:03:62:A2:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86956861758D35A8F7080F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b301b075-7382-36d3-9f52-a600b0abaeb7.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396614
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:68:61:75:8d:35:a8:f7:08:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=9ef3a4b7-8b6b-4775-add7-b1c71459aa29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a7:c6:12:3f:86:22:65:c1:00:03:b4:ab:d2:
                    38:34:71:8f:0e:75:0e:65:49:c3:37:f2:c3:c6:c5:
                    d9:39:43:a5:f5:2c:02:85:bb:4f:46:99:4a:11:87:
                    70:79:5f:44:7e:c8:5c:fa:6e:ec:82:57:71:ad:77:
                    76:b0:80:a5:5b:87:0a:50:b4:b7:ee:96:23:8a:c7:
                    ae:b7:2b:3b:cc:e1:21:a3:b5:09:f2:2c:af:db:a8:
                    38:e2:a3:22:16:90:68:cc:da:2a:c9:31:82:40:5e:
                    bf:09:1d:e7:9d:4f:37:88:e1:d7:06:ce:92:0d:8f:
                    27:e4:cc:86:12:69:7b:ba:ad:18:9f:43:3e:22:3a:
                    5a:6f:cd:8a:62:2a:02:82:e5:8d:83:87:94:b5:67:
                    d4:4d:b1:d9:95:8c:45:e9:b0:23:46:5f:1f:c1:42:
                    23:a9:78:4d:95:40:57:4c:a4:4c:66:f2:69:d8:20:
                    0f:ae:f1:4d:7d:7b:5f:0e:2f:5e:ca:75:fd:80:56:
                    b7:f8:61:77:2b:ec:c7:88:39:6d:d2:c1:49:f9:ae:
                    12:ab:8b:f7:37:15:d7:4a:4d:47:06:88:98:aa:30:
                    7d:86:3f:14:36:95:63:cd:3b:18:6b:e5:00:30:4d:
                    1a:08:be:9d:52:5b:b8:30:81:a0:1e:3d:3c:2d:43:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:B2:8A:D6:7C:09:E6:D4:6F:4F:BA:B6:C3:04:2E:03:62:A2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b301b075-7382-36d3-9f52-a600b0abaeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:48:95:4e:c4:d3:21:7f:1a:b0:af:8d:26:da:95:85:dc:3c:
         b1:70:b8:7f:a5:5f:25:22:40:e2:d5:26:3f:31:93:46:d8:32:
         4d:68:21:b6:ae:7b:71:ea:92:0f:42:68:3a:61:d7:e6:fb:0f:
         36:3b:b4:0c:25:7c:88:fb:5f:ca:ec:c7:f1:26:cb:c2:77:d5:
         9d:04:6f:f7:d9:b9:3c:ee:36:cd:d8:85:da:1e:fd:dc:e6:a4:
         e3:61:36:32:55:4a:6c:9f:72:e1:41:e4:f2:f5:91:60:6c:f7:
         e6:67:67:5d:56:20:0f:cf:5f:2c:2e:f7:24:2c:10:4e:73:35:
         77:d9:0c:d4:c6:01:36:3d:00:7b:e9:fd:50:1d:3c:40:d8:ec:
         d3:3d:72:d3:54:88:9f:07:eb:c0:6e:f9:fa:99:9e:b1:4a:60:
         28:2f:77:36:08:10:eb:ab:0b:f4:ce:ee:e0:e3:c4:7e:35:9c:
         25:d9:f5:c2:86:9b:33:ce:94:a6:05:e4:6d:d0:7e:7e:28:a1:
         2d:49:4f:fd:61:ae:42:ce:a9:de:5c:86:7a:a3:c3:88:00:e5:
         66:b0:c7:04:aa:88:e9:42:9e:0c:cd:c7:09:db:6f:23:e8:98:
         64:4c:cf:2b:51:61:0b:3e:5a:02:6a:a9:a9:b0:5a:c1:79:08:
         ba:5f:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:55 2026 by rpki-client